Computer Hacking Forensic Investigator (CHFI v10) — Question 139

Which of the following is a non-zero data that an application allocates on a hard disk cluster in systems running on Windows OS?

Answer options

• A. Sparse File
• B. Master File Table
• C. Meta Block Group
• D. Slack Space

Correct answer: A

Explanation

A Sparse File is specifically designed to allow the storage of large amounts of data efficiently by only allocating space for the non-zero data. The Master File Table is used for file system metadata, while Meta Block Group is related to other file systems, and Slack Space refers to unused space within a cluster that is not allocated for data.